GO-2026-4601 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, gitea, boring-registry, opentelemetry-collector-contrib, prometheus-pushgateway, spire-controller-manager, postgres-operator, dask-gateway, step-ca, s5cmd, crossplane-provider-aws-sns, bo...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: mattermost, dynamic-localpv-provisioner, crossplane-provider-aws-ec2, docker-cli-buildx, kube-logging-operator-custom-runner, gatus, telegraf, lazydocker, helm-push, act, argo-events, nri-apache, emissary, trufflehog, temporal-server, kubevela, vault-k8s,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: mattermost, dynamic-localpv-provisioner, crossplane-provider-aws-ec2, docker-cli-buildx, kube-logging-operator-custom-runner, gatus, telegraf, lazydocker, helm-push, act, argo-events, nri-apache, emissary, trufflehog, temporal-server, kubevela, vault-k8s,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, dex, mattermost, dynamic-localpv-provisioner, crossplane-provider-aws-ec2, kube-logging-operator-custom-runner, kubernetes-csi-external-resizer, gatus, mesosphere-vsphere-csi, boring-registry, cilium-cli, lazygit, vault-secrets-webhook,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, prometheus-postgres-exporter, crossplane-provider-aws-kendra, eksctl, kubescape-operator-fips, chartmuseum-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-aws-wafv2, crane,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, dynamic-localpv-provisioner, oauth2-proxy, kube-logging-operator-custom-runner, boring-registry, vault-k8s, act, minio-operator, crossplane, prometheus-pushgateway, omnibump, spire-controller-manager, postgres-operator, buf, dask-gateway,...

CLEANSTART-2026-DG06447 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.12.2-r0, 2.12.2-r1

Multiple security vulnerabilities affect the kubernetes-replicator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: newrelic-nri-kube-events-fips, tigera-operator-fips, syft-fips, rancher, karma, chartmuseum-fips, spiffe-helper-fips, gcp-compute-persistent-disk-csi-driver-fips, argo-rollouts-fips, k8s-device-plugin, kyverno-policy-reporter-ui-fips, pgtimetable-fips,...